Contractbook

Danish AI-powered contract lifecycle management for European businesses

Capacities

German AI-powered knowledge management and note-taking for connected thinking

Contractbook

Excellent

22/25

Capacities

Strong

17/25

Score Breakdown

DimensionContractbookCapacities

Data Residency

Where is your data stored and processed?

Contractbook: EU data residency on AWS EU regions; Danish company with EU-compliant data processing

Capacities: Core data hosted in Germany; AI features route through OpenAI with zero-retention API option

4/5

EU data residency on AWS EU regions; Danish company with EU-compliant data processing

4/5

Core data hosted in Germany; AI features route through OpenAI with zero-retention API option

Legal Jurisdiction

Which laws govern the company and your data?

Contractbook: Danish ApS, EU-incorporated, subject to Danish and EU law, no US parent

Capacities: German GmbH, EU-incorporated, no US parent entity, German law applies

5/5

Danish ApS, EU-incorporated, subject to Danish and EU law, no US parent

5/5

German GmbH, EU-incorporated, no US parent entity, German law applies

Data Retention & Training

Is your data used for model training?

Contractbook: No training on contract data; full GDPR Article 28 DPA available; customer-controlled retention

Capacities: No training on user data; AI layer uses OpenAI zero-retention API; core data under customer control

5/5

No training on contract data; full GDPR Article 28 DPA available; customer-controlled retention

4/5

No training on user data; AI layer uses OpenAI zero-retention API; core data under customer control

Certifications

ISO 27001, SOC 2, Cyber Essentials, etc.

Contractbook: SOC 2 Type II certified; ISO 27001 not yet confirmed; GDPR-native architecture

Capacities: GDPR-compliant with DPA available; no ISO 27001 or SOC 2 as a small bootstrapped team

3/5

SOC 2 Type II certified; ISO 27001 not yet confirmed; GDPR-native architecture

1/5

GDPR-compliant with DPA available; no ISO 27001 or SOC 2 as a small bootstrapped team

Regulatory Fit

Suitability for regulated industries and professional services

Contractbook: Excellent fit for EU legal, procurement, and regulated industries; eIDAS-compliant e-signatures

Capacities: Good for EU professionals and SMEs; limited enterprise controls restrict regulated-sector suitability

5/5

Excellent fit for EU legal, procurement, and regulated industries; eIDAS-compliant e-signatures

3/5

Good for EU professionals and SMEs; limited enterprise controls restrict regulated-sector suitability

Total Score

22/25

17/25

Best For

Contractbook

Best for EU-headquartered organisations needing maximum data sovereignty; privacy-conscious teams who need strong data retention controls; teams on a tight budget.

Capacities

Best for EU-headquartered organisations needing maximum data sovereignty; regulated industries (Datatilsynet, CNIL); privacy-conscious teams who need strong data retention controls; enterprises requiring SSO integration.

Detailed Comparison

Capacities vs Contractbook: Trust & Compliance Comparison

Capacities (Capacities, DE) scores 17/25 overall with a Silver (Strong) trust badge. German AI-powered knowledge management and note-taking for connected thinking. Contractbook (Contractbook, DK) scores 22/25 with a Gold (Excellent) trust badge. Danish AI-powered contract lifecycle management for European businesses.

Dimension-by-Dimension Breakdown

#### Data Residency

Both score equally at 4/5.

●Capacities (4/5): Core data hosted in Germany; AI features route through OpenAI with zero-retention API option

●Contractbook (4/5): EU data residency on AWS EU regions; Danish company with EU-compliant data processing

#### Legal Jurisdiction

Both score equally at 5/5.

●Capacities (5/5): German GmbH, EU-incorporated, no US parent entity, German law applies

●Contractbook (5/5): Danish ApS, EU-incorporated, subject to Danish and EU law, no US parent

#### Data Retention & Training

Contractbook leads with 5/5 vs 4/5.

●Capacities (4/5): No training on user data; AI layer uses OpenAI zero-retention API; core data under customer control

●Contractbook (5/5): No training on contract data; full GDPR Article 28 DPA available; customer-controlled retention

#### Certifications

Contractbook leads with 3/5 vs 1/5.

●Capacities (1/5): GDPR-compliant with DPA available; no ISO 27001 or SOC 2 as a small bootstrapped team

●Contractbook (3/5): SOC 2 Type II certified; ISO 27001 not yet confirmed; GDPR-native architecture

#### Regulatory Fit

Contractbook leads with 5/5 vs 3/5.

●Capacities (3/5): Good for EU professionals and SMEs; limited enterprise controls restrict regulated-sector suitability

●Contractbook (5/5): Excellent fit for EU legal, procurement, and regulated industries; eIDAS-compliant e-signatures

Certifications at a Glance

Certification	Capacities	Contractbook
GDPR	Yes	Yes
SOC 2 Type II	No	Yes

Overall Verdict

Contractbook has a clear trust advantage, scoring 22/25 compared to Capacities's 17/25. Contractbook particularly excels in data retention & training, certifications, regulatory fit.

Frequently Asked Questions

Which is better for EU compliance, Contractbook or Capacities?

Contractbook has a TrustKit score of 22/25 while Capacities scores 17/25. Contractbook currently rates higher across data residency, legal jurisdiction, data retention, certifications, and regulatory fit.

How do Contractbook and Capacities compare on data residency?

Contractbook scores 4/5 for data residency (EU data residency on AWS EU regions; Danish company with EU-compliant data processing), while Capacities scores 4/5 (Core data hosted in Germany; AI features route through OpenAI with zero-retention API option).

Are Contractbook and Capacities GDPR compliant?

Both tools are assessed across five compliance dimensions. Contractbook has a regulatory fit score of 5/5 and Capacities scores 3/5. Check the full comparison above for a detailed breakdown.

Explore Each Tool